Skip to content
OpenAdvisories

Archive

28 April 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2022-24449 Public exploit

    Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML do…

  • Unscored —
    CVE-2022-28454 Public exploit

    Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS).

  • Unscored —
    CVE-2022-28117 Public exploit Scanner template EPSS 23%

    A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the a…